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That which is claimed is: 

1 . A method for validating credentials comprising: 

determining, at a first system, that a client does not have a valid session credential 
for the first system; 

retrieving, at the first system, information from a session token held by the client, 
the information corresponding to a possible session credential for a second system; 

presenting at least some of the information from the session token to the second 
system; and 

determining whether the client has a valid session credential with the second 

system. 

2. A method according to claim 1, further comprising granting a session 
credential to the client on the first system, after determining that the client has a valid 
session credential for the second system. 

3. A method according to claim 1, further comprising sending a session 
token to the client, the token corresponding to the session credential on the first system. 

4. A method according to claim 1, further comprising directing the client to 
the second system to establish a session credential, after determining that the client does 
not have a valid session credential for the second system. 

5. A method according to claim 1, further comprising directing the client to 
the first system to establish a session credential, after determining that the client does not 
have a valid session credential for the second system. 
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6. A method according to claim 1, further comprising maintaining the client 
session credential with the second system. 

7. A method according to claim 1, wherein determining whether the client 
has a valid credential with the second system is at least partially from presenting at least 
some of the information from the session token. 

8. A method according to claim 1, wherein retrieving information from the 
session token held by the client comprises: 

sending a query to the client from the first system, the query including 
identification as originating from a domain name corresponding to the second system; 
and 

receiving a response to the query. 

9. A method for validating session credentials of a client comprising: 
determining, at a first system, that a client does not have a valid session credential 

for the first system; 

retrieving, at the first system, information from a session token held by the client, 
the information corresponding to a session credential for a second system, wherein 
retrieving information from the session token held by the client comprises receiving a 
session token from the client corresponding to the second system; 

presenting at least some of the information from the session token to the second 

system; 
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determining whether the client has a valid session credential with the second 
system, wherein determining whether the client has a valid credential with the second 
system is at least partially from presenting information from the session token; 

granting a session credential to the client on the first system, after determining 
that the client has a valid session credential for the second system; 

sending a session token to the client, the token corresponding to the session 
credential on the first system; and 

maintaining the client session credentials. 

10. Computer executable software code transmitted as an information signal, 
the code for validating credentials, the code comprising: 

code to determine, at a first system, that a client does not have a valid session 
credential for the first system; 

code to retrieve, at the first system, information from a session token held by the 
client, the information corresponding to a possible session credential for a second system; 

code to present at least some of the information from the session token to the 
second system; and 

code to determine whether the client has a valid session credential with the second 

system. 

11. A computer readable medium having computer executable code stored 
thereon, the code for validating credentials, the code comprising: 

code to determine, at a first system, that a client does not have a valid session 
credential for the first system; 
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code to retrieve, at the first system, information from a session token held by the 
client, the information corresponding to a possible session credential for a second system; 

code to present at least some of the information from the session token to the 
second system; and 

code to determine whether the client has a valid session credential with the second 

system. 

12. A programmed computer for validating credentials, comprising: 

a memory having at least one region for storing computer executable program 
code; and 

a processor for executing the program code stored in the memory, wherein the 
program code comprises: 

code to determine, at a first system, that a client does not have a valid session 
credential for the first system; 

code to retrieve, at the first system, information from a session token held by the 
client, the information corresponding to a possible session credential for a second system; 

code to present at least some of the information from the session token to the 
second system; and 

code to determine whether the client has a valid session credential with the second 

system. 

13. A method for establishing session credentials comprising: 
determining that a client does not have a valid session credential for a first system 

or a second system; 

sending, from the first system to the client, a log in page; 
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receiving, at the first system from the client, log in information; 

sending, from the first system to the second system, the log in information; and 

receiving, at the first system from the second system, information corresponding 

to a session credential for the second system, the session credential granted by the second 

system based at least in part on the log in information. 

14. A method according to claim 11, further comprising granting a session 
credential for the first system. 

15. A method according to claim 1 1 , further comprising granting a session 
credential for the second system. 

16. A method according to claim 11, further comprising associating session 
credentials for the first system and the second system with the client. 

17. A method for establishing session credentials comprising: 
determining that a client does not have a valid session credential for a first system 

or a second system; 

sending, from the second system to the client, a log in page; 

receiving, at the second system from the client, log in information; and 

sending, from the second system to the first system, information corresponding to 
a session credential for the second system, the session credential granted by the second 
system based at least in part on the log in information; and 

granting a session credential for the first system. 
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18. A method according to claim 17, further comprising granting a session 
credential for the second system. 

19. A method according to claim 17, further comprising associating session 
credentials for the first system and the second system with the client. 

20. A method for validating credentials comprising: 

determining, at a first system, that a client does not have a valid session credential 
for the first system; 

redirecting the client to a second system; 

sending, from the second system to the first system, session credentials for the 
second system; 

sending, from the first system to the second system, the session credentials for the 
second system; 

determining, at the second system, that the session credentials for the second 
system, received from the first system, are valid; and 

sending, from the second system to the first system, information indicating that 
the session credentials for the second system are valid. 

21 . A method according to claim 20, further comprising granting the client 
session credentials for the first system. 
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